Privacy Policy

1. Controller

BEROTEC GmbH
Gewerbestr. 13, 75057 Kürnbach, Germany
Phone: +49 7258 2009090
Email: info@berotec.de

2. Purposes of Processing and Legal Bases

2.1 Provision of the Website / Server Logs

When you access our website, technical data is processed automatically (IP address, date and time of the request, requested URL, referrer, HTTP status code, volume of data transferred, browser, operating system). This processing is technically necessary to provide the website and to ensure its stability and security. The legal basis is Art. 6(1)(f) GDPR. Log data is deleted or anonymised no later than 7 days.

2.2 Cookies and Consent Management

We use essential cookies that are required to operate the online shop (e.g. shopping cart, login, security). We only set all other cookies (statistics, marketing) if you give your consent in the EU Cookie Consent Manager for JTL-Shop.

• Essential cookies: Art. 6(1)(f) GDPR in conjunction with § 25(2) TDDDG (German Telecommunications Digital Services Data Protection Act)
• Statistics and marketing cookies: Art. 6(1)(a) GDPR in conjunction with § 25(1) TDDDG

You can change or withdraw your consent at any time in the Consent Manager with effect for the future.

2.3 Customer Account (optional)

If you create a customer account, we process your email address and the data you provide in order to manage the account and display your orders. The legal basis is Art. 6(1)(a) GDPR. You can delete the account at any time in the shop; we routinely delete inactive accounts after 14 months.

2.4 Orders and Performance of Contract

To process orders, we process in particular your name, billing and delivery address, email address, optionally your telephone number, the products ordered, and payment and shipping information. This processing is necessary for the performance of the contract (Art. 6(1)(b) GDPR). Where necessary, data is transferred to shipping service providers (e.g. DHL, DHL Express, DPD) for delivery and shipment tracking. In addition, commercial and tax retention obligations of 6 to 10 years apply (Art. 6(1)(c) GDPR).

2.5 Payment Processing

Depending on the payment method chosen, we process payment data (e.g. IBAN, masked card data, transaction ID) to carry out the payment. The legal bases are Art. 6(1)(b) and (f) GDPR. Among others, we use the following payment service provider:

• PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg – PayPal Privacy Statement

2.6 Contacting Us

If you contact us by email or via a contact form, we process the information you provide (e.g. name, email address, content of the message) to handle your enquiry and for any follow-up questions. The legal basis is Art. 6(1)(b) GDPR for contract-related enquiries and Art. 6(1)(f) GDPR for other enquiries. We routinely delete enquiries after the communication has ended, unless statutory retention obligations apply.

2.7 Embedded Content

YouTube: We embed videos in enhanced privacy mode. Google only receives information once you actively play a video; this may involve a transfer to the USA, which we base on the EU–US Data Privacy Framework (adequacy decision (EU) 2023/1795) and – in the event that this ceases to apply – additionally on Standard Contractual Clauses (Art. 46(2)(c) GDPR). The provider is Google Ireland Limited, Dublin. The legal basis is Art. 6(1)(a) GDPR in conjunction with § 25(1) TDDDG.

Social media: Links to our social media profiles are embedded as simple hyperlinks. No automatic data transfer takes place when you access our website.

2.8 Statistics (Google Analytics 4)

With your consent, we use Google Analytics 4 (provider: Google Ireland Limited, Dublin) to analyse the use of our website. The legal basis is Art. 6(1)(a) GDPR in conjunction with § 25(1) TDDDG. IP addresses are processed in truncated form only. Data transfers to the USA take place on the basis of the EU–US Data Privacy Framework (adequacy decision (EU) 2023/1795); in addition, and in the event that this decision ceases to apply, we base the transfer on Standard Contractual Clauses (Art. 46(2)(c) GDPR).

2.9 Marketing (Google Ads)

With your consent, we use Google Ads conversion tracking (provider: Google Ireland Limited, Dublin). The legal basis is Art. 6(1)(a) GDPR in conjunction with § 25(1) TDDDG. Data transfers to the USA take place on the basis of the EU–US Data Privacy Framework (adequacy decision (EU) 2023/1795); in addition, and in the event that this decision ceases to apply, we base the transfer on Standard Contractual Clauses (Art. 46(2)(c) GDPR).

2.10 Partner Programme (our own affiliate system)

We operate our own partner programme. If you reach our shop via a partner link (?ref=…), we set – only with your consent – the first-party cookie berotec_aff containing a random ID (storage period 30 days). For this ID, we store the associated partner campaign and, if an order is placed, the order number, in order to attribute the commission to the partner. The cookie contains only a random ID – no IP address, no name, no other personal data in plain text. No transfer to third parties or to a third country takes place; processing is carried out solely by us as the first party. The legal basis is Art. 6(1)(a) GDPR in conjunction with § 25(1) TDDDG. You can withdraw your consent at any time with effect for the future in the Consent Manager.

2.11 Review Reminders by Email

If you purchase a product in our shop, we send you an email after approximately 10 days asking you to review the product purchased. This processing is based on our legitimate interest in improving our products and services and in promotional communication, pursuant to § 7(3) UWG (German Act Against Unfair Competition) and Art. 6(1)(f) GDPR. You can object to receiving these emails at any time, at no cost other than the transmission costs according to the basic rates.

2.12 Newsletter (Brevo)

You can subscribe to our newsletter at checkout or in the footer of our online shop. Subscription uses the double opt-in procedure.

We use Brevo (Brevo GmbH, Köpenicker Str. 126, 10179 Berlin) to send it. The data is stored on servers in Germany. We have concluded a data processing agreement with Brevo pursuant to Art. 28 GDPR.

Upon subscription, we process: email address, optionally your name, as well as the IP address and time of subscription and confirmation, in order to document consent. The legal basis is Art. 6(1)(a) GDPR.

You can withdraw your consent at any time via the unsubscribe link in the newsletter or by email. The lawfulness of processing carried out until withdrawal remains unaffected. After you unsubscribe, your data is removed from the mailing list. Your email address may subsequently be stored on a blocklist in order to prevent future mailings (Art. 6(1)(f) GDPR); you can object to this storage at any time. Further information: Brevo privacy notice.

3. Recipients and Service Providers

Recipients of personal data may include in particular:

• IT, hosting and server service providers (ecomDATA GmbH, servers in Germany)
• Payment service providers (e.g. PayPal)
• Shipping service providers (e.g. DHL, DHL Express, DPD)
• Analytics and marketing providers (Google, only with consent)
• Newsletter service provider (Brevo GmbH, Germany)
• Authorities and public bodies, where required by law

With service providers that process data on our behalf, we conclude data processing agreements pursuant to Art. 28 GDPR.

4. Your Rights

Under the GDPR, you have the following rights:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)

Objection to direct marketing: Where we process your personal data for direct marketing (e.g. review reminders, newsletter), you can object to this processing at any time, without giving reasons, with effect for the future. After your objection, we will no longer process your data for these purposes.

You can withdraw any consent given at any time with effect for the future. You also have the right to lodge a complaint with a data protection supervisory authority. The competent authority is the LfDI Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, website of the LfDI Baden-Württemberg.

5. Data Security

We use TLS encryption, role-based authorisation concepts, access restrictions, backups and regular security updates to protect your data.

6. Cookies in Detail

The cookies currently used in the online shop are listed below:

7. Status

Last updated: July 2026. The current version of this privacy policy is always available on this page.